Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
File: uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft (raw, json)
Hash identifier: Peye7awwLDdcP7Kzv6kxj7irCgUaOg7OG3AGBB5JqbM=
Subject key identifier: F2:DE:DB:54:8A:3D:A6:B9:12:A5:9A:20:29:82:39:DD:1A:D9:D9:BA
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Certificate issuer: /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial: 019A71B85841EE17056A206ECE42DA354F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
Manifest number: 07AD
Signing time: Tue 11 Nov 2025 07:01:37 +0000
Manifest this update: Tue 11 Nov 2025 07:01:37 +0000
Manifest next update: Wed 12 Nov 2025 07:01:37 +0000
Files and hashes: 1: 2k6jA-zFKrnl3ANKucWtX3-DA-Y.roa (hash: +pS/y3RWSR6TxKFf5ZhZuo/zIgUD0Lt0+Wg4CPqr+Zg=)
2: uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl (hash: gk6edgRC4oG1GnndBRJkYQoTx+H9sqFSnHfZH2Ik21U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:58:41:ee:17:05:6a:20:6e:ce:42:da:35:4f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
Validity
Not Before: Nov 11 07:01:37 2025 GMT
Not After : Nov 12 07:01:37 2025 GMT
Subject: CN=f2dedb548a3da6b912a59a20298239dd1ad9d9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:41:0e:2e:18:f5:6c:90:eb:4e:8b:65:e4:
81:36:f2:5b:36:0d:e2:9f:29:f4:5f:cb:3d:74:dc:
b7:84:10:37:e2:76:fa:3d:0b:ea:5b:06:e9:a2:d7:
fc:4c:3f:65:7e:a0:05:a7:99:64:72:21:4b:f6:e4:
c7:f1:76:b8:58:19:d0:a8:ad:25:8b:ce:c8:03:d8:
fe:f6:b5:7a:0d:4c:2a:9e:6d:60:19:05:ad:f6:b7:
a7:fc:97:52:10:0f:4e:30:94:a2:09:34:50:b0:3f:
2d:ca:7c:2f:33:33:f5:7d:fc:9d:69:4e:9d:ae:18:
6a:25:f3:d9:43:9d:af:a0:d5:03:45:77:1b:8e:c3:
43:a7:71:b5:b5:b2:f8:63:8c:c0:54:e4:51:b9:7e:
23:56:18:0d:9b:14:41:8d:34:61:1d:55:e2:53:0f:
72:d3:0b:60:55:06:dd:6b:ac:df:32:a2:2b:bc:75:
49:92:0e:3c:a4:d0:59:d0:ec:d7:98:0b:35:b6:f7:
f3:ea:de:87:b3:1e:3f:76:3e:c9:bc:39:2f:86:ca:
53:85:6a:6c:59:5a:13:28:5f:51:0e:24:97:bd:d8:
e5:d1:e5:05:91:9b:72:0e:a6:3e:fe:ec:77:58:8f:
89:3e:2c:7c:28:c5:83:c5:f5:e6:e2:5a:a4:2d:c9:
75:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DE:DB:54:8A:3D:A6:B9:12:A5:9A:20:29:82:39:DD:1A:D9:D9:BA
X509v3 Authority Key Identifier:
keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:63:8b:5f:38:4d:21:6f:27:37:21:10:49:f8:ff:ae:9a:f5:
47:d0:f4:68:85:73:81:d3:0b:46:a3:49:42:c3:0b:a4:7b:7c:
d7:37:5d:51:c6:24:df:fa:87:57:a5:09:bd:26:25:e8:5c:98:
80:26:f7:76:31:03:68:d7:08:27:29:bc:5f:ce:0c:e5:ed:8e:
ed:cb:22:51:65:14:45:a6:dd:14:e5:4b:2f:ae:f1:40:72:2e:
bd:03:d6:4c:9c:ff:73:9c:cd:1b:8a:7c:8e:be:99:6c:2e:48:
ca:d9:a8:6b:8c:64:0c:01:14:ff:22:31:fc:77:a4:50:47:6c:
a5:bd:37:7f:ca:e7:cd:d5:df:64:bf:3d:82:6b:9f:a0:aa:a1:
31:c2:f9:85:83:ed:0f:cc:50:11:08:45:6c:7b:0e:c0:29:1f:
5d:3b:2b:bc:78:74:09:1a:7f:6f:50:ee:86:7f:d6:90:6b:b9:
c3:d8:3f:08:92:fb:01:97:d0:1f:30:e8:95:ce:71:96:82:0d:
61:ec:4e:c5:18:1b:df:38:df:6e:26:2b:4a:c7:91:3c:cb:89:
65:4d:e7:bf:30:3f:d5:7e:46:3e:9a:d3:8a:16:b6:f5:34:31:
78:ad:62:cb:be:3b:9c:3b:ae:66:3a:63:9a:4d:b8:37:b8:c1:
f1:4a:ee:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:35 2025 by rpki-client